CVE-2026-74950

Опубликовано: 18 авг. 2026

Источник: debian

EPSS Низкий

Описание

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
firefox	fixed	154.0-1		package

Примечания

https://www.mozilla.org/en-US/security/advisories/mfsa2026-74/#CVE-2026-74950

EPSS

Процентиль: 12%

0.00221

Низкий

Связанные уязвимости

CVE-2026-74950

CVSS3: 8.8

ubuntu

9 дней назад

(Privilege escalation in the Downloads API component. This vulnerabilit ...)

CVE-2026-74950

CVSS3: 6.1

redhat

10 дней назад

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

CVE-2026-74950

CVSS3: 8.8

nvd

10 дней назад

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

GHSA-hhfp-m479-hqjj

CVSS3: 8.8

github

9 дней назад

Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1.

SUSE-SU-2026:3658-1

suse-cvrf

7 дней назад

Security update for MozillaFirefox

EPSS

Процентиль: 12%

0.00221

Низкий